| Package | Affected versions | Patched versions |
|---|---|---|
| open source | = 1.6.2.0= 1.6.2.1= 1.6.2.10= 1.6.2.11= 1.6.2.12= 1.6.2.13= 1.6.2.14= 1.6.2.15= 1.6.2.15.1= 1.6.2.16= 1.6.2.16.1= 1.6.2.16.2= 1.6.2.17= 1.6.2.17.1= 1.6.2.17.2= 1.6.2.17.3= 1.6.2.18= 1.6.2.18.1= 1.6.2.18.2= 1.6.2.19= 1.6.2.2= 1.6.2.20= 1.6.2.21= 1.6.2.22= 1.6.2.23= 1.6.2.3= 1.6.2.4= 1.6.2.5= 1.6.2.6= 1.6.2.7= 1.6.2.8= 1.6.2.9= 1.8.0= 1.8.1= 1.8.1.1= 1.8.1.2= 1.8.10.0= 1.8.10.1= 1.8.11.0= 1.8.2= 1.8.2.1= 1.8.2.2= 1.8.2.3= 1.8.2.4= 1.8.3= 1.8.3.1= 1.8.3.2= 1.8.3.3= 1.8.4= 1.8.4.1= 1.8.4.2= 1.8.4.3= 1.8.4.4= 1.8.5= 1.8.5.0= 1.8.6.0= 1.8.7.0= 1.8.7.1= 1.8.7.2= 1.8.8.0= 1.8.8.1= 1.8.8.2= 1.8.9.0= 1.8.9.1= 1.8.9.2= 1.8.9.3= 10.0.0= 10.0.1= 10.1.0= 10.1.1= 10.1.2= 10.1.3= 10.2.0= 10.2.1= 10.3.0 |
Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows remote authenticated users to cause a denial of service or possibly have unspecified other impact via a series of KEYPAD_BUTTON_MESSAGE events.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free